http://bugzilla.opensuse.org/show_bug.cgi?id=1174041 Bug ID: 1174041 Summary: VUL-1: mumble: OCB2 encryption / decryption oracle Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: i@marguerite.su Reporter: Andreas.Stieger@gmx.de QA Contact: qa-bugs@suse.de CC: security-team@suse.de Found By: --- Blocker: --- Fixed in mumble 1.3.1:
Fixed: Potential exploit in the OCB2 encryption (#4227)
Unlikely to occur in practice. Worth tracking and fixing nevertheless. References: https://github.com/mumble-voip/mumble/pull/4227 https://www.mumble.info/blog/mumble-1.3.1-release-announcement/ https://eprint.iacr.org/2019/311 -- You are receiving this mail because: You are on the CC list for the bug.